Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
File: Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json)
Hash identifier: MHNpQocUjS4BosPBe+QNGMHTmBl5QIOZju/jEkYe08M=
Subject key identifier: ED:E3:8B:8D:10:EF:3A:AF:C8:BD:63:B7:0E:89:15:95:ED:DC:88:81
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Certificate issuer: /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial: 0194BA84431E534DEAA3D2209AC5E5E00D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
Manifest number: 02A2
Signing time: Fri 31 Jan 2025 04:00:17 +0000
Manifest this update: Fri 31 Jan 2025 04:00:17 +0000
Manifest next update: Sat 01 Feb 2025 04:00:17 +0000
Files and hashes: 1: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: wkdc85j9ih49nHFDJe09VzYhwndDTnqNFZLnHL4vvI0=)
2: Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa (hash: 5fNIeYhAsD92mNfB8kwG5sSqFg3x5U2buT5vjKuMGrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:43:1e:53:4d:ea:a3:d2:20:9a:c5:e5:e0:0d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Validity
Not Before: Jan 31 04:00:17 2025 GMT
Not After : Feb 1 04:00:17 2025 GMT
Subject: CN=ede38b8d10ef3aafc8bd63b70e891595eddc8881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:42:ca:1f:e0:4f:6b:d4:80:a9:95:53:36:
b2:ca:98:91:28:19:67:aa:16:fb:4a:f2:cb:2b:73:
af:74:81:b3:82:f3:89:75:ab:f5:0f:67:52:b6:0e:
3b:8b:59:67:ed:77:1f:75:2c:41:c1:25:57:b5:c5:
8f:2b:6e:e6:25:de:8e:52:2d:a5:73:6d:18:68:41:
df:95:92:1a:31:a8:8e:17:72:2a:2b:b7:5c:6c:81:
30:18:6e:c2:27:e4:4c:5f:5f:d4:bb:24:6a:41:56:
27:64:a5:55:2e:81:e1:4b:be:87:4a:16:a7:66:a7:
2d:c4:aa:0f:ba:38:62:68:76:57:96:7c:f3:17:25:
71:45:9c:41:e6:f3:67:43:4f:fc:6f:35:04:50:ab:
05:ae:4a:0f:f1:51:d5:e4:79:42:9d:40:e4:8a:7f:
b0:c8:0f:63:f9:96:a0:31:2d:14:d8:71:ee:38:4c:
09:33:4c:9a:98:5c:ea:6b:1a:bf:90:59:6b:af:c6:
51:c8:1c:54:f7:75:5b:8b:f8:df:12:af:bc:1d:d9:
3c:5f:5c:25:bb:51:55:ef:3e:bd:18:7e:23:0d:81:
0e:63:9f:04:20:b9:75:cb:36:c9:68:6c:19:e3:ac:
8e:e0:32:f2:37:2d:da:18:b2:47:b7:77:d0:71:23:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:8B:8D:10:EF:3A:AF:C8:BD:63:B7:0E:89:15:95:ED:DC:88:81
X509v3 Authority Key Identifier:
keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:b6:d3:59:91:07:ab:67:16:61:46:f8:ed:23:66:67:eb:4c:
36:62:f8:33:57:22:8d:08:fb:57:83:b5:93:58:e2:67:cf:61:
2c:d5:b7:04:70:22:00:38:30:2e:ea:ef:b6:8f:cd:ff:9c:d5:
42:e9:f5:ca:ce:65:8f:a7:99:74:93:10:c4:63:84:71:66:5e:
16:d9:af:3c:f4:c9:67:13:12:07:b7:71:11:88:3a:85:af:f0:
4c:bb:b6:10:5d:a5:6f:7f:ce:5a:fd:11:25:ac:a3:35:9a:07:
6f:f8:6b:ea:f5:70:6f:4b:94:69:1f:c0:75:f1:af:f7:fc:95:
a3:73:12:13:96:ba:b0:b6:bc:e1:57:5e:8b:d0:e8:61:4c:c7:
0c:46:77:bf:42:28:4b:5a:65:90:42:2b:1b:09:f4:0f:4f:4b:
b3:98:d9:29:06:97:59:e3:ac:ff:d2:15:a4:91:8c:cb:d0:9f:
5f:34:16:95:a4:6c:a0:c7:4c:7d:2f:ec:5e:d5:7e:5a:c4:72:
cf:9b:d9:b9:5e:4d:bd:b7:e4:1b:b5:52:2c:40:e9:15:bb:76:
4c:a6:83:50:75:63:4b:18:6f:d0:6d:c0:b5:c8:e6:14:f6:ff:
e0:89:53:82:21:67:74:75:db:7c:a7:74:87:41:8d:c1:6d:0a:
b1:53:a9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:45 2025 by rpki-client on console-fra.rpki-client.org